Debian Bug report logs - #826309
gnupg2: Please make the build reproducible wrt. varying build hostname

version graph

Package: gnupg2; Maintainer for gnupg2 is Debian GnuPG Maintainers <pkg-gnupg-maint@lists.alioth.debian.org>; Source for gnupg2 is src:gnupg2 (PTS, buildd, popcon).

Reported by: intrigeri@debian.org

Date: Sat, 4 Jun 2016 12:12:01 UTC

Severity: wishlist

Tags: fixed-upstream, patch

Found in version gnupg2/2.1.11-7

Fixed in version 2.1.13-1

Done: Daniel Kahn Gillmor <dkg@fifthhorseman.net>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, reproducible-builds@lists.alioth.debian.org, Debian GnuPG Maintainers <pkg-gnupg-maint@lists.alioth.debian.org>:
Bug#826309; Package gnupg2. (Sat, 04 Jun 2016 12:12:07 GMT) (full text, mbox, link).


Acknowledgement sent to intrigeri@debian.org:
New Bug report received and forwarded. Copy sent to reproducible-builds@lists.alioth.debian.org, Debian GnuPG Maintainers <pkg-gnupg-maint@lists.alioth.debian.org>. (Sat, 04 Jun 2016 12:12:07 GMT) (full text, mbox, link).


Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: intrigeri@debian.org
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: gnupg2: Please make the build reproducible wrt. varying build hostname
Date: Sat, 04 Jun 2016 14:08:20 +0200
[Message part 1 (text/plain, inline)]
Package: gnupg2
Version: 2.1.11-7
Severity: wishlist
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: hostname
X-Debbugs-Cc: reproducible-builds@lists.alioth.debian.org

Hi,

the attached patch fixes (in my local rebuild.sh test environment) the
non-determinism in /usr/share/win32/gpgv.exe caused by varying build
hostname. Please have a look and let me know if you think it should be
implemented differently.

For the record, the hostname is captured in gpgv.exe since upstream
commit 049b3d9, whose message explains what the change is, but does
not make its rationale clear.

Thank you for maintaining GnuPG in Debian!

Cheers,
--
intrigeri

[reproducible-vs-hostname.diff (text/x-diff, attachment)]

Information forwarded to debian-bugs-dist@lists.debian.org, Debian GnuPG Maintainers <pkg-gnupg-maint@lists.alioth.debian.org>:
Bug#826309; Package gnupg2. (Sat, 04 Jun 2016 16:57:08 GMT) (full text, mbox, link).


Acknowledgement sent to Werner Koch <wk@gnupg.org>:
Extra info received and forwarded to list. Copy sent to Debian GnuPG Maintainers <pkg-gnupg-maint@lists.alioth.debian.org>. (Sat, 04 Jun 2016 16:57:08 GMT) (full text, mbox, link).


Message #10 received at 826309@bugs.debian.org (full text, mbox, reply):

From: Werner Koch <wk@gnupg.org>
To: intrigeri@debian.org
Cc: 826309@bugs.debian.org, Debian Bug Tracking System <submit@bugs.debian.org>
Subject: Re: [pkg-gnupg-maint] Bug#826309: gnupg2: Please make the build reproducible wrt. varying build hostname
Date: Sat, 04 Jun 2016 18:50:14 +0200
On Sat,  4 Jun 2016 14:08, intrigeri@debian.org said:

> For the record, the hostname is captured in gpgv.exe since upstream
> commit 049b3d9, whose message explains what the change is, but does
> not make its rationale clear.

The hostname helps to triage bugs on Windows.  Sometimes we get bug
reports for GnuPG but it is not clear who build the binary version.  The
information allows an average user to quickly check this.

Although I doubt the value of reproducible builds for Windows; I just
pushed a fix which sets the hostname to "<anon>" by default.  In our
builds we will use --enable-build-timestamp which then inserts it again.


Shalom-Salam,

   Werner

-- 
Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.
    /* EFH in Erkrath: https://alt-hochdahl.de/haus */




Information forwarded to debian-bugs-dist@lists.debian.org, Debian GnuPG Maintainers <pkg-gnupg-maint@lists.alioth.debian.org>:
Bug#826309; Package gnupg2. (Sat, 04 Jun 2016 17:51:10 GMT) (full text, mbox, link).


Acknowledgement sent to intrigeri <intrigeri@debian.org>:
Extra info received and forwarded to list. Copy sent to Debian GnuPG Maintainers <pkg-gnupg-maint@lists.alioth.debian.org>. (Sat, 04 Jun 2016 17:51:10 GMT) (full text, mbox, link).


Message #15 received at 826309@bugs.debian.org (full text, mbox, reply):

From: intrigeri <intrigeri@debian.org>
To: Werner Koch <wk@gnupg.org>
Cc: 826309@bugs.debian.org
Subject: Re: Bug#826309: [pkg-gnupg-maint] Bug#826309: gnupg2: Please make the build reproducible wrt. varying build hostname
Date: Sat, 04 Jun 2016 19:48:49 +0200
Control: tag -1 + fixed-upstream

Werner Koch wrote (04 Jun 2016 16:50:14 GMT) :
> I just pushed a fix which sets the hostname to "<anon>" by default.
> In our builds we will use --enable-build-timestamp which then
> inserts it again.

Thanks a lot!

Cheers,
-- 
intrigeri



Added tag(s) fixed-upstream. Request was from intrigeri <intrigeri@debian.org> to 826309-submit@bugs.debian.org. (Sat, 04 Jun 2016 17:51:10 GMT) (full text, mbox, link).


Marked as fixed in versions 2.1.13-1. Request was from Daniel Kahn Gillmor <dkg@fifthhorseman.net> to control@bugs.debian.org. (Mon, 29 Aug 2016 15:48:09 GMT) (full text, mbox, link).


Marked Bug as done Request was from Daniel Kahn Gillmor <dkg@fifthhorseman.net> to control@bugs.debian.org. (Mon, 29 Aug 2016 15:48:11 GMT) (full text, mbox, link).


Notification sent to intrigeri@debian.org:
Bug acknowledged by developer. (Mon, 29 Aug 2016 15:48:12 GMT) (full text, mbox, link).


Message sent on to intrigeri@debian.org:
Bug#826309. (Mon, 29 Aug 2016 15:48:18 GMT) (full text, mbox, link).


Message #26 received at 826309-submitter@bugs.debian.org (full text, mbox, reply):

From: Daniel Kahn Gillmor <dkg@fifthhorseman.net>
To: control@bugs.debian.org
Cc: 826309-submitter@bugs.debian.org
Subject: closing 826309
Date: Mon, 29 Aug 2016 11:43:17 -0400
close 826309 2.1.13-1
thanks

the build hostname was fixed upstream in GnuPG commit
79b7a8a9e0d41b743ceaee20dc47294359fe0d44.





Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Sat, 01 Oct 2016 07:25:45 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Wed May 17 14:04:14 2023; Machine Name: bembo

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.